Winxp SP2 DEP Disabled

[eva2000]

Hi in this article http://support.microsoft.com/default.aspx?...kb;en-us;875352 it says you can use unatteneded install to config SP2 installation to have DEP disabled by default but they don't go into the specifics of how to do this ?

Any ideas ?

thanks

[Nazgul]

It is mentioned on that page, but there is an error in that information:

For unattended installations of Windows XP SP2 or later versions, you can use the Unattend.txt file to pre-populate a specific DEP configuration. You can use the OSLoadOptionsVar entry in the [Data]section of the Unattend.txt file to specify a system-wide DEP configuration.

This states that you can use the OSLoadOptionsVar entry to set DEP settings during unattended installation.

The only problem is that they state that it should be in [Data] while it should be in [setupData].

This article on Microsoft Technet specifies the different settings you can provide.

[eva2000]

thank you so

in [setupData] put

[setupData]OSLoadOptionsVar = /noexecute=AlwaysOff

hmm first article is winxp sp2 says [Data] but other article is win2k3 ?

Edited August 11, 2005 by eva2000

[Gee]

Have you tried it modifying the Data section in winnt.sif? Were you successful?

My method is not as slick, I disable DEP and make a copy of the boot.ini file after renaming it to boot.txt. I then copy this to my CD at

$OEM$\$1\Boot.txt

during my clean up process, I use the following batch

@echo off
cd\
attrib -r -a -s -h boot.ini
del /q boot.ini
ren boot.txt boot.ini
attrib +r +a +s +h boot.ini
.
.
.
snip
.
.
.
:Reboot
shutdown.exe -r -f -t 60 -c "Windows XP Pro will restart in 1 minute....  IF EXPLORER WAS CLOSED DUE TO Data Execution Prevention, it will be CORRECTED on REBOOT"
RD /S /Q %systemdrive%\SysPrep\
:End
del /Q %systemdrive%\*.*
RD /S /Q %systemdrive%\install\
EXIT

It works, but DEP will activate on initial boot and this is resolved after the reboot.

[eva2000]

well tried with [setupData] group and tried test install and it said, line 24 of winnt.sif is invalid which pertains to [setupData] entry, so it might be [Data] group will try and update this thread

[eva2000]

darn [Data] group doesn't work too get invalid line 5 when running setup

edit: forgot the embrace the option in quotes.. retesting [setupData] group now heh

Edited August 11, 2005 by eva2000

[eva2000]

well didn't turn out right now my boot.ini has 2 lines original + new line

Gee, how you setup that batch to run during unattended ?

Edited August 11, 2005 by eva2000

[Gee]

well didn't turn out right now my boot.ini has 2 lines original + new line

Gee, how you setup that batch to run during unattended ?

<{POST_SNAPBACK}>

I use CMDLines.txt to call RunOnceEx.cmd. Here is my RunOnceEx.cmd

cmdow @ /HID

@echo off

SET D=%SYSTEMROOT%\system32\

REG ADD "HKCR\Applications\gspot.exe\shell\open\command" /d "%systemroot%\System32\gspot.exe %%1" /ve /f

REG ADD "HKLM\SOFTWARE\Microsoft\WMV9_VCM" /d "%systemroot%\System32" /v "File Location" /f

regsvr32 /s %D%LegitCheckControl.DLL

regsvr32 /s %D%ac3filter.ax

regsvr32 /s %D%CLVSD.ax

regsvr32 /s %D%divxdec.ax

regsvr32 /s %D%mpeg2dmx.ax

regsvr32 /s %D%CoreVorbis.ax

regsvr32 /s %D%iac25_32.ax

regsvr32 /s %D%Ivfsrc.ax

regsvr32 /s %D%vp6dec.ax

regsvr32 /s %D%ir41_32.ax

regsvr32 /s %D%OggDS.dll

regsvr32 /s %D%wmvdmod.dll

regsvr32 /s %D%wmsdmod.dll

regsvr32 /s %D%wmadmod.dll

regsvr32 /s %D%wmspdmod.dll

regsvr32 /s %D%xvid.ax

regsvr32 /s %D%VSFilter.dll

regedit /s %D%codecreg.reg

REGEDIT /S %systemdrive%\install\RegTweak.reg

DEL %D%\L3codeca.acm /Q

SET KEY=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

REG ADD %KEY% /V TITLE /D "Installing Applications" /f

REG ADD %KEY%\010 /VE /D "Adobe Reader 7.0.2" /f

REG ADD %KEY%\010 /V 1 /D "%systemdrive%\install\Acroread702.exe" /f

REG ADD %KEY%\040 /VE /D "Avast AntiVirus Home Edition" /f

REG ADD %KEY%\040 /V 1 /D "%systemdrive%\install\Avast.exe /VERYSILENT /NORESTART /SP-" /f

REG ADD %KEY%\999 /VE /D "SysPrep and Reboot" /f

REG ADD %KEY%\999 /V 1 /D "%systemdrive%\install\Reboot.cmd" /f

EXIT

The first part just loads a bunch of CoDecs and registers them. Then I do my Registry Tweaks.

The last part installs custome applications during initial login.

You will notice 999 runs Reboot.cmd, that is where I have my Cleanup batch file.

[Gee]

I just found an easier solution after doing some research.

Just simply add this one line to your Cleanup.cmd file

bootcfg /raw /id 1 "/noexecute=AlwaysOff /NOPAE /fastdetect"

It will modify the boot.ini file